Files
CVEs-PoC/2018/CVE-2018-15178.md
T
2024-06-18 02:51:15 +02:00

753 B

CVE-2018-15178

Description

Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes/user/auth.go.

POC

Reference

Github